porschefortwayne.com XSS vulnerability

Open Bug Bounty ID: OBB-432380 Description| Value ---|--- Affected Website:| porschefortwayne.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

What to expect for this year's Black Friday and Cyber Monday

Last year during holidays, US online sales surpassed $122 billion. This represented a 12 percent increase over the previous year. But beyond the overall growth, what's more interesting is that sales at physical stores dropped by 10 percent, the result of ongoing consumer comfort with and adoption...

Implementing the CIS 20 Critical Security Controls: Slash Risk of Cyber Attacks by 85%

If a CISO needed to cut cyber attack risk by 85%, how would this security chief go about accomplishing that? Would the CISO even know where to begin? It’s safe to say that such a mandate would be considered daunting, and maybe even overwhelming. CISOs are scrambling to protect IT infrastructures...

powerautobrokers.com XSS vulnerability

Open Bug Bounty ID: OBB-407472 Description| Value ---|--- Affected Website:| powerautobrokers.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Php Inventory Arbitrary File Upload Vulnerability

Php Inventory&Invoice Management System is a sales management system. The system features inventory management, invoice management and user management. An arbitrary file upload vulnerability exists in Php Inventory&Invoice Management System. An attacker can exploit this vulnerability to upload...

Design/Logic Flaw

Php Inventory & Invoice Management System allows Arbitrary File Upload via dashboard/editmyaccountdetail/...

CVE-2017-15990

Php Inventory & Invoice Management System allows Arbitrary File Upload via dashboard/editmyaccountdetail/...

CVE-2017-15990

CVE-2017-15990 affects the Php Inventory & Invoice Management System, where an arbitrary file upload is possible via the path dashboard/edit_myaccountdetail/. The connected documents consistently describe an arbitrary file upload vulnerability in this software, with multiple references (NVD entry...

CVE-2017-15990: Unrestricted Upload of File with Dangerous Type

Php Inventory & Invoice Management System allows Arbitrary File Upload via dashboard/editmyaccountdetail/...

PHP Inventory Arbitrary File Upload

Exploit Title: Php Inventory & Invoice Management System - Arbitrary File Upload Dork: N/A Date: 30.10.2017 Vendor Homepage: http://savsofteproducts.com/ Software Link: http://www.phpinventory.com/ Demo: http://phpinventory.com/phpinventorydemo/ Version: N/A Category: Webapps Tested on:...

Php Inventory - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Php Inventory & Invoice Management System - Arbitrary File Upload Dork: N/A Date: 30.10.2017 Vendor Homepage: http://savsofteproducts.com/ Software Link: http://www.phpinventory.com/ Demo: http://phpinventory.com/phpinventorydem...

Php Inventory - Arbitrary File Upload

Php Inventory - Arbitrary File Upload Exploit Title: Php Inventory & Invoice Management System - Arbitrary File Upload Dork: N/A Date: 30.10.2017 Vendor Homepage: http://savsofteproducts.com/ Software Link: http://www.phpinventory.com/ Demo: http://phpinventory.com/phpinventorydemo/ Version: N/A...

Php Inventory - Arbitrary File Upload

Exploit Title: Php Inventory & Invoice Management System - Arbitrary File Upload Dork: N/A Date: 30.10.2017 Vendor Homepage: http://savsofteproducts.com/ Software Link: http://www.phpinventory.com/ Demo: http://phpinventory.com/phpinventorydemo/ Version: N/A Category: Webapps Tested on:...

PT-2017-3371

Name of the Vulnerable Software and Affected Versions Php Inventory & Invoice Management System affected versions not specified Description The issue is related to the lack of restrictions on file uploads in the Php Inventory & Invoice Management System. This can be exploited by a remote attacker...

[SECURITY] Fedora 25 Update: check-mk-1.2.8p26-1.fc25

check-mk is a general purpose Nagios-plugin for retrieving data. It adopts a new approach for collecting data from operating systems and network compone nts. It obsoletes NRPE, checkbyssh, NSClient, and checksnmp and it has many benefits, the most important are a significant reduction of CPU usag...

[SECURITY] Fedora 26 Update: check-mk-1.2.8p26-1.fc26

check-mk is a general purpose Nagios-plugin for retrieving data. It adopts a new approach for collecting data from operating systems and network compone nts. It obsoletes NRPE, checkbyssh, NSClient, and checksnmp and it has many benefits, the most important are a significant reduction of CPU usag...

[SECURITY] Fedora 27 Update: check-mk-1.2.8p26-1.fc27

check-mk is a general purpose Nagios-plugin for retrieving data. It adopts a new approach for collecting data from operating systems and network compone nts. It obsoletes NRPE, checkbyssh, NSClient, and checksnmp and it has many benefits, the most important are a significant reduction of CPU usag...

coachhouserv.com XSS vulnerability

Vulnerable URL: http://www.coachhouserv.com/inventory-listing.php?cat=3%27%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 05.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1348796 VIP...

Lansweeper 6.0.0.63 Cross Site Scripting Vulnerability

Exploit for asp platform in category web applications ============================================= - Discovered by: Giovanni Cerrato, Giovanni Guido and BackBox team - Severity: Medium ============================================= I. VULNERABILITY ------------------------- Lansweeper XSS...

Lansweeper 6.0.0.63 Cross Site Scripting

============================================= - Release date: October 05th, 2017 - Discovered by: Giovanni Cerrato, Giovanni Guido and BackBox team - Severity: Medium ============================================= I. VULNERABILITY ------------------------- Lansweeper XSS vulnerability. II...